Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/9B741CFE0C3411EDB8619843C4F9AE02.roa
File:                     9B741CFE0C3411EDB8619843C4F9AE02.roa (raw, json)
Hash identifier:          oJYEoaEThRMxBGvil27GsNiveOB+RhewFzQDnOZyafM=
Subject key identifier:   EB:71:64:1B:03:9B:43:AE:4F:28:37:BC:22:B2:53:BC:DD:6D:D5:93
Certificate issuer:       /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial:       0488
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/9B741CFE0C3411EDB8619843C4F9AE02.roa
Signing time:             Sat 05 Oct 2024 00:34:46 +0000
ROA not before:           Sat 05 Oct 2024 00:34:46 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     47856
IP address blocks:        160.32.240.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160 (0x488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
        Validity
            Not Before: Oct  5 00:34:46 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=670089a6-aee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:34:61:c5:1b:22:94:9f:10:44:03:a6:af:
                    d3:d2:4f:d6:d3:e0:b7:1e:e8:93:82:88:5d:86:18:
                    01:97:62:27:a1:e5:c6:b4:71:94:34:b5:e7:b2:13:
                    7b:58:aa:f8:32:b1:5c:b6:c1:45:58:2f:af:d5:90:
                    68:91:54:cc:10:15:63:d1:fd:63:14:df:cc:ce:12:
                    1a:a2:12:30:79:be:a6:28:47:69:c5:18:e0:9f:bd:
                    eb:49:ed:43:3d:ee:45:d7:88:ad:38:5d:9b:b6:a3:
                    7c:54:af:a2:4d:65:16:09:17:a7:ad:f5:d7:19:96:
                    30:30:9c:b7:b8:2b:9f:30:e4:2a:41:12:9a:de:b2:
                    1c:30:60:ad:f3:9b:bd:ef:ba:2d:be:eb:8a:ea:49:
                    81:0d:2b:c7:92:3a:97:1e:dc:8a:e8:95:cf:59:b4:
                    0c:c7:8d:7c:a3:73:d2:fc:57:5f:10:91:62:6e:0f:
                    b5:5d:e4:ed:ba:3b:27:b4:d2:06:8f:28:e8:be:c0:
                    82:92:3b:b6:d0:86:72:18:bf:8c:41:ae:50:f2:b0:
                    ae:d7:a2:05:a2:35:03:ad:7e:04:dd:0c:a0:c4:ae:
                    bc:8e:f7:27:ea:d5:b3:d9:b2:9e:da:77:ba:9b:a8:
                    cd:2a:6d:27:5a:09:a6:a1:bd:db:75:7f:b9:d2:76:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:71:64:1B:03:9B:43:AE:4F:28:37:BC:22:B2:53:BC:DD:6D:D5:93
            X509v3 Authority Key Identifier:
                keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/9B741CFE0C3411EDB8619843C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:cb:6b:b4:21:c2:1d:b9:a9:5e:6f:0d:ec:50:3c:e7:94:8d:
         60:37:52:35:de:4b:f9:41:1f:9f:37:71:15:27:e2:6b:ad:ea:
         3c:f1:ac:d3:a1:69:86:fd:e0:e3:84:7d:e4:3d:a0:ab:6f:98:
         fe:c0:83:1e:76:82:58:2f:2a:8f:65:b4:80:57:fe:71:43:84:
         80:9e:2b:9a:a5:b7:0e:3d:af:97:22:aa:87:1a:16:b9:bf:91:
         f4:b7:f4:82:e8:44:0c:77:fb:d6:39:fc:61:2b:18:c6:d1:df:
         a1:1d:3b:ab:20:50:5a:fc:f8:d8:82:30:85:91:cb:71:57:d9:
         0f:87:8c:4b:84:a2:21:14:69:b9:e7:06:10:0a:38:91:9f:6a:
         f3:bf:6f:79:35:2f:44:4c:1c:0e:51:da:a8:d4:ed:4c:f9:18:
         30:df:74:60:3d:05:1f:8a:41:ff:09:3e:70:b5:21:29:21:85:
         50:3e:35:3b:2c:d0:52:64:2b:60:0c:b0:e2:fc:ea:bd:0f:bf:
         c8:8c:88:ef:a4:b3:82:ef:37:f1:c9:23:5a:3e:67:ce:79:f8:
         37:44:92:1d:18:4f:3b:89:f3:88:45:91:f6:e5:fd:ba:98:eb:
         84:f9:3a:19:64:82:89:16:98:cb:ca:3e:60:57:eb:58:83:48:
         71:27:a5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:24 2024 by rpki-client on console-ams.rpki-client.org